Sack update

.github/workflows/semgrep.yml

@@ -0,0 +1,24 @@
+on:
+  workflow_dispatch: {}
+  pull_request: {}
+  push:
+    branches:
+    - main
+    - master
+    paths:
+    - .github/workflows/semgrep.yml
+  schedule:
+  # random HH:MM to avoid a load spike on GitHub Actions at 00:00
+  - cron: 40 22 * * *
+name: Semgrep
+jobs:
+  semgrep:
+    name: semgrep/ci
+    runs-on: ubuntu-20.04
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+    container:
+      image: returntocorp/semgrep
+    steps:
+    - uses: actions/checkout@v4
+    - run: semgrep ci

app.js

@@ -9,7 +9,7 @@ var indexRouter = require('./routes/index');
 
 var app = express();
 
-// view engine setup
+// view engine setup.
 app.set('views', path.join(__dirname, 'views'));
 app.set('view engine', 'pug');
 

index.js

@@ -1,9 +1,15 @@
 const express = require('express')
+const _ = require("lodash");
 const app = express()
 const port = process.env.PORT || 3000
 
 var LoremIpsum = require('lorem-ipsum').LoremIpsum;
 
+let obj = { 'cpp': [{ 'java': { 'python': 2012 } }] };
+
+_.set(obj, 'cpp[0].java.python', 2020);
+-.set();
+
 var lorem = new LoremIpsum({
   sentencesPerParagraph: {
     max: 8,

package.json

@@ -6,17 +6,18 @@
     "start": "node ./bin/www"
   },
   "dependencies": {
-    "clean-css": "^4.1.11",
-    "constantinople": "^3.1.1",
-    "cookie-parser": "~1.4.4",
-    "debug": "~2.6.9",
-    "express": "~4.16.1",
-    "http-errors": "~1.6.3",
-    "lorem-ipsum": "^2.0.3",
-    "md5": "^2.2.1",
-    "mersenne-twister": "^1.1.0",
-    "morgan": "~1.9.1",
-    "pug": "^2.0.4",
-    "uglify-js": "^2.6.0"
+    "clean-css": "4.1.11",
+    "constantinople": "3.1.1",
+    "cookie-parser": "1.4.4",
+    "debug": "2.6.9",
+    "express": "4.16.1",
+    "http-errors": "1.6.3",
+    "lorem-ipsum": "2.0.3",
+    "md5": "2.2.1",
+    "mersenne-twister": "1.1.0",
+    "morgan": "1.9.1",
+    "pug": "2.0.4",
+    "uglify-js": "2.6.0",
+    "lodash": "4.6.0" 
   }
 }